{"api_version":"1","generated_at":"2026-11-10T22:13:32+00:00","cve":"CVE-2026-59574","urls":{"html":"https://cve.report/CVE-2026-59574","api":"https://cve.report/api/cve/CVE-2026-59574.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-59574","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-59574"},"summary":{"title":"CVE-2026-59574","description":"In notifyPollingLoopFrames of hal_fwlog.cc, there is a possible way to trigger an out of bounds read and write when formatting firmware log notifications due to an incorrect bounds check. This could lead to physical information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","state":"PUBLISHED","assigner":"Google_Devices","published_at":"2026-11-10 20:19:28","updated_at":"2026-11-10 21:46:42"},"problem_types":["Information disclosure"],"metrics":[],"references":[{"url":"https://source.android.com/docs/security/bulletin/pixel/2026/2026-11-01","name":"https://source.android.com/docs/security/bulletin/pixel/2026/2026-11-01","refsource":"dsap-vuln-management@google.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-59574","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59574","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Google","product":"Android","version":"affected Android kernel","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"Android","vendor":"Google","versions":[{"status":"affected","version":"Android kernel"}]}],"descriptions":[{"lang":"en","value":"In notifyPollingLoopFrames of hal_fwlog.cc, there is a possible way to trigger an out of bounds read and write when formatting firmware log notifications due to an incorrect bounds check. This could lead to physical information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation."}],"problemTypes":[{"descriptions":[{"description":"Information disclosure","lang":"en"}]}],"providerMetadata":{"dateUpdated":"2026-11-10T19:21:57.345Z","orgId":"83238938-5644-45f0-9007-c0392bcf6222","shortName":"Google_Devices"},"references":[{"url":"https://source.android.com/docs/security/bulletin/pixel/2026/2026-11-01"}],"x_generator":{"engine":"cvelib 1.7.1"}}},"cveMetadata":{"assignerOrgId":"83238938-5644-45f0-9007-c0392bcf6222","assignerShortName":"Google_Devices","cveId":"CVE-2026-59574","datePublished":"2026-11-10T19:21:57.345Z","dateReserved":"2026-07-06T06:21:53.235Z","dateUpdated":"2026-11-10T19:21:57.345Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-11-10 20:19:28","lastModifiedDate":"2026-11-10 21:46:42","problem_types":["Information disclosure"],"metrics":[],"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"59574","Ordinal":"1","Title":"CVE-2026-59574","CVE":"CVE-2026-59574","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"59574","Ordinal":"1","NoteData":"In notifyPollingLoopFrames of hal_fwlog.cc, there is a possible way to trigger an out of bounds read and write when formatting firmware log notifications due to an incorrect bounds check. This could lead to physical information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","Type":"Description","Title":"CVE-2026-59574"}]}}}